Privacy Policy

This policy explains how Nelkos collects, uses, shares and protects your personal data under UK GDPR and the Data Protection Act 2018 — in plain English.

Data we collect

Account and identity data, order and transaction data, delivery addresses, payment metadata (we never store full card numbers), and device and usage data.

Why we use it and our legal bases

To perform our contract with you, for our legitimate interests (security, fraud prevention, improving our service), to meet legal obligations, and — where required — with your consent.

Sharing and transfers

We share data only as needed with sellers, couriers, payment processors and IT providers under strict agreements. We never sell your personal data. International transfers use appropriate safeguards.

Your rights

You can access, rectify, erase, restrict or object to processing, request portability, and withdraw consent at any time. You may also complain to the Information Commissioner’s Office (ICO).